Removing Product Information Displayed in the HTTP Headers

Issue

• Customers might want to remove the product information found in the HTTP Headers and in the console logs for security reasons.
• The information displays: Liferay-Portal: Liferay Digital Experience Platform 7.0.10 GA1 (Wilberforce / Build 7010 / June 15, 2016)

Environment

• Liferay DXP 7.0 - 7.3

Resolution

• For DXP 7.0, set in the portal-ext.properties: 

  http.header.version.verbosity=Liferay Digital Experience Platform

• For DXP 7.1
  • If the fix pack level is older than dxp-5, set in the portal-ext.properties: 

    http.header.version.verbosity=Liferay Digital Experience Platform

  • If the fix pack is on dxp-5+ (including dxp-5), set in the portal-ext.properties:

    http.header.version.verbosity=off 

• For DXP 7.2 & DXP 7.3
  

  http.header.version.verbosity=off 

• As best practices, never modify portal.properties directly but make all changes in a portal-ext.properties file.

Additional Information

• LPS-87969 changes the portal property value of http.header.version.verbosity from http.header.version.verbosity=Liferay Digital Experience Platform to http.header.version.verbosity=off. Refer to the Fix Pack 5 Important Changes for more information.
• For more information on the properties' possible values, please check the documentation